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PATENT 

ATTORNEY DOCKET NO: 06543/020001 

MANAGING TRANSFERS OF INFORMATION 
IN A COMMUNICATIONS NETWORK 

5 Background of the Invention 

This invention relates to managing transfers of 

information in communications networks such as the World 

Wide Web. 

One aspect of the invention relates to managing 

10 queries for new or changed items of network-based 

information. Many services provide standing queries over 
streams of information such as news wires, e-mail, bulletin 
boards, and stock quotations. These services are sometimes 
called "information filters," "continuous queries," or 

15 "clipping services." News Edge and Compuserve are two 
examples of such services. 

Another aspect of the invention relates to using 
proxy servers to implement security protocols on behalf of 
network tools and to manage sets of authentication 

20 credentials for users. Existing corporate networks often 
include a gatekeeper or proxy or fire-wall server that 
provides a single point of entry and exit from the corporate 
network to the rest of the world. The network browsers on 
the corporate network create network requests, and the proxy 

25 server forwards them to servers on the Internet. The proxy 
intercepts all traffic to and from each browser, and ensures 
that only a very restricted set of traffic and people can 
access the corporate network from the outside. 

Another aspect of the invention relates to inducing 

30 advertisers to target advertisements to consumers for whom 
the advertisements are likely to be of interest. On the 
Internet it is presently possible for advertisers to do 
direct advertising to individual consumers by broadcasting 
"junk mail" that appears in user e-mail and network bulletin 

35 boards. 



Another aspect of the invention relates to 
extracting data from sources of network-based information on 
a communications network. Object embedding tools are known 
such as OLE (Object Linking and Embedding) and OpenDoc that 
5 are used to build compound documents* These tools contain a 
link to an object that the tool embeds within a compound 
document such as a word-processor document or a spreadsheet. 
If the object changes, the compound document changes 
accordingly. 

10 Summary of the Invention 

In one aspect, the invention features a system for 
identifying updated items of network-based information to 
users in a public packet switched communications network 
that includes a plurality of network servers. The system 

15 includes a master log server and a plurality of user 

computers. The master log server periodically receives data 
from at least some of the plurality of network servers. The 
master log server causes the data to be assembled into a one 
or more master logs having a plurality of entries. Each of 

20 the master logs includes at least one entry. Each entry 
pertains to creation of or changing of an item of network- 
based information, such as a page of information, that has 
occurred within a predetermined time span. The master log 
server causes at least some of the entries in the one or 

25 more master logs to be transmitted to one of the user 
computers. The user computer receives a user query 
comprising a request to provide to a user at least a subset 
of the entries in the one or more master logs, wherein each 
of the entries in the subset matches a search pattern 

30 contained in the user query. The search pattern includes an 
identification of a time period. The user computer causes 
the user query to be executed by providing to the user, from 
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each of the one or more master logs into which data has been 
assembled within the time period, the subset of the entries. 

In one embodiment, the data received by the master 
log server from the network servers comprises logs having 
5 entries pertaining to creation of or changing of items of 
network-based information. In another embodiment, the 
master log server is programmed to compute log entries for 
network servers that do not forward logs to the master log 
server, by directly querying the servers and comparing the 

10 current contents of the servers to the master log or logs, 
which indicate when the contents of each server was last 
noticed to change. 

By providing a master server that receives data from 
each of a plurality of network servers and assembles the 

15 data into one or more master logs, and user computers 

provide entries in response to queries limited to particular 
time periods, the invention provides a set of efficient logs 
that enable user queries limited to particular time periods 
to be executed on the World Wide Web, which has thousands of 

20 the network servers each with its own unique content, 

without requiring the user computer to communicate with each 
of the network servers. 

Another aspect of the invention features a system 
for implementing security protocols in a public packet 

25 switched communications network comprising a plurality of 
network servers that receive requests from users for items 
of network-based information and that transmit the items of 
network-based information to the users in response to the 
requests. A network tool, implemented on a computer, 

30 receives a first item of network-based information that 

includes a link in a protocol compatible with the network 
tool. In response to user input selecting the link, the 
network tool creates a request for the second item of 
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network-based information. The request includes the link. 
A proxy server, implemented on a computer, receives the 
first item of network-based information from one of the 
network servers, wherein the link is in a protocol 
5 incompatible with the network tool, translates the link into 
the protocol compatible with the network tool, and transmits 
to the network tool the first item of network-based 
information, with the link being translated into the 
protocol compatible with the network tool. The proxy server 

10 receives the request for the second item of network-based 
information from the network tool, retrieves the link from 
the request, back- translates the link into the protocol 
incompatible with the network tool, and requests the second 
item of network-based information from one of the network 

15 servers. 

By providing a proxy server that translates links 
from a protocol incompatible with the network tool to a 
protocol compatible with the network tool and that back- 
translates the link, the invention enables Web browsers and 

20 tools that don't implement Web security protocols such as 

SSL and SHTTP to access information that would otherwise be 
unavailable to these browsers and tools. 

Another aspect of the invention features a system 
for managing authenticating credentials of a user of a 

25 public packet switched communications network that includes 
a plurality of network servers that receive requests from 
users for items of network-based information and transmit 
the items of network-based information to the users in 
response to the requests. A network tool, implemented on a 

30 computer, creates a request for an item of network-based 

information from one of the network servers in response to 
input from a user, and receives the item of network-based 
information in response to the request. A proxy server, 



implemented on a _ computer, maintains a table of 
authenticating credentials for each of the plurality of 
network servers, receives the request from the network tool, 
and forwards the request to the network server. The proxy 
server receives a request for authentication from the one of 
the network servers, retrieves from the table authenticating 
credentials for the network server, transmits the 
authenticating credentials to the network server, receives 
the item of network-based information from the network 
server, and forwards the item of network-based information 
to the network tool. 

By providing a proxy server that manages a user's 
authenticating credentials automatically on behalf of a 
user, the invention enables the user to avoid having to 
assume the responsibility of managing and remembering a 
large number of differing authenticating credentials, or 
having to use the same authenticating credentials for a 
large number of services. Using the same authenticating 
credentials for a large number of services can increase the 
risk that a breach in security in connection with one 
service will affect other services. Moreover, a user may be 
able to use a particular set of authenticating credentials 
in connection with one service but not another service, for 
example if one of the credentials is already being used by 
another user of the other service. The invention avoids the 
annoyance to the user of having to type in a user ID and 
password each time the user visits a subscription service. 

Another aspect of the invention features a system 
for inducing advertisers to target advertisements to 
consumers in a public packet switched communications network 
that includes a plurality of network advertiser servers that 
transmit advertisements. The system includes an advertising 
broker server and a plurality of user computers. The 



advertising broker server receives advertisements from each 
of the network advertiser servers. Each of the 
advertisements is targeted toward at least one of a 
plurality of users served by the advertising broker server 
and is accompanied by an offer having monetary value for 
acceptance of the advertisement. The advertising broker 
server transmits at least one of the advertisements to one 
of the user computers operated by a user targeted by the 
advertisement. Each one of the plurality of user computers 
receives advertisements from the advertising broker server 
and, whenever a user of the user computer has read an 
advertisement, sends a message to the advertising broker 
server indicating that the user has read the advertisement. 
The advertising broker server receives the message 
indicating that the user has read the advertisement, and, in 
response thereto, causes the offer having monetary value to 
be executed. 

By providing an advertising broker programmed to 
receive advertisements and messages indicating that users 
have read the advertisements, and to cause an offer having 
monetary value to be executed, the invention induces 
advertisers to target advertisements to consumers and 
induces the consumers to read the advertisements. Thus, the 
invention provides a substitute for direct broadcasting of 
"junk mail" to users for whom the advertisements are not of 
interest and who must separate such direct advertising from 
important personal and work messages. 

Another aspect of the invention features a system 
for extracting data from sources of network-based 
information in a communications network that includes a 
plurality of network servers programmed to transmit network- 
based information over the network. A script program, 
implemented on a computer in the communications network, 



extracts data from network-based information provided by one 
of the network servers. An object embedding program, 
implemented on a computer in the communications network, 
includes a link to the network-based information provided by 
5 the network server and a link from which the object 

embedding program can locate the script program. The object 
embedding program applies the script program to the network- 
based information so as to cause the data to be extracted 
from the network-based information, and embeds the data 

10 within a compound document implemented on a computer in the 
communications network. 

By providing an object embedding program that can 
locate a script program and cause the script program to 
extract data from an item of network-based information, the 

15 invention enables users to extract data from Web pages or 
other items of network-based information and embed it in 
documents, including spreadsheets and other applications, 
without including extraneous content from the Web pages, yet 
while enabling the extracted information to change whenever 

20 the Web pages change. 

Brief Description of the Drawings 
Fig. 1 is a diagram of a system for providing 
updated pages, or other items of network-based information, 
to users in accordance with the invention. 

25 Fig. 2 is a diagram of another system for providing 

updated pages of information to users in accordance with the 
invention, in which the master server duplicates its master 
logs onto multiple slave servers. 

Fig. 3 is a diagram of a system for implementing 

30 security protocols on behalf of a network tool that does not 
implement them, in accordance with the present invention. 

Fig. 4 is a diagram of the system of Fig. 3 
illustrating how a proxy server manages authenticating 



credentials on behalf of a user in accordance with the 
invention* 

Fig* 5 is a diagram of a system for inducing 
advertisers to target their advertisements to consumers for 
5 whom the advertisements are likely to be of interest, in 
accordance with the invention. 

Fig. 6 is a diagram of a system for extracting 
information from pages of information on a communications 
network, in accordance with the invention. 
10 Detailed Description 

With reference to Fig. 1, in the World Wide Web 
network 10, each of thousands of Web servers 12 prepares 
daily compressed logs of pages of information (or other 
informational objects such as programs, multimedia content, 
15 or files) that are new or have changed within the last day. 
The logs contain entries of the form: <URL, time, content 
tags, title>. The "URL" is a universal resource locator 
that identifies a particular page or other item of 
information that is new or has changed. The "time" is the 
20 date and time when the page has most recently been modified. 
The "content tags" are a set of short classifications of the 
page's contents. These tags, which identify such things as 
suitability for children, the type of content, etc., are 
utilized during the process of searching for relevant pages. 
25 The "title" is the title of the page. 

For example, a particular log entry might be of the 

form: 

<http: //www. openmarket.com/home.html, 10/16/95 
11: 32a, {Rating/G, Category/Business/Internet/ 
30 Software, Class/Home-page} , {Open Market Home 

Page}>. 

Every day, each of Web servers 12 sends its daily 
logs to a master log server 14. The master log server 



merges the daily .logs from the Web servers into a master set 
of logs. These logs are the day log, the week log, the 
month log, and the year log. The day log contains all of 
the present day's daily logs as they arrive from Web servers 
5 12, merged into a single log. Every midnight, the day log 
is merged into the week log, and the day log is cleared. 
Once a week, the week log is merged into the month log and 
the week log is cleared. Once a month, the month log is 
merged into the year log and cleared. 
10 When entries from one log are rolled over into 

another log, e.g. from the day log into the month log, if 
both logs contain an entry for the same URL, the most recent 
entry should be retained and the older one discarded. 

Master log server 14 indexes each of the master logs 
15 by each of the fields in the log entries (URL, time, content 
tags, and title). This enables fast searches. 

Users at user computers 16 can use queries to search 
the master logs to find pages that are changed or new. A 
typical query might be as follows: Find all pages that are 
20 new or changed within the last week that are in Category/ 
Business /Internet /Software. Each such page that is of 
interest to the user could reside on any of the thousands of 
Web servers 12 on network 10. 

In one embodiment, user computers 16 transmits the 
25 queries directly to master log server 14 and master log 

server 14 transmits to the appropriate user computer 16 the 
entries that match the search pattern contained in the query 
transmitted by that user computer. In another embodiment, 
master log server 14 downloads its logs into each of user 
30 computers 16, and the queries are executed internally by 
user computers 16. 

Thus, system 10 enables World Wide Web users to 
discover new or changed pages that might be of interest to 



them. For example, a consumer can find out whenever new 
pages appear concerning video cameras. An office-products 
salesman can find out whenever new businesses in a 
particular sales district publish new pages or change their 
old pages. A lobbyist for a certain company can monitor the 
pages of all local, state, and federal politicians and 
agencies for any references to the particular company or 
issues affecting the particular company. 

The user queries are typically "standing queries," 
which are queries that are re-evaluated periodically (once a 
day, once a week, etc.)* Daily queries are associated with 
the day log, weekly queries are associated with the week 
log, etc. 

Immediately before master log server 14 rolls the 
day log over into the week log, the standing daily queries 
are matched against the day log and the results are sent 
back to the users. Similarly, immediately before the master 
log server rolls the week log over into the month log, the 
standing weekly queries are matched against the week log. 
Standing queries can also be evaluated at other times as 
desired by users. 

In an alternative embodiment, master log server 14 
maintains a larger set of logs: log-1, log-2, log-4, ... 
log-2 n . Log-1 contains entries for the present day. Every 
day, log-1 is rolled over into log-2. Every two days, log-2 
is rolled over into log-4. In general, log-2 1 is rolled 
over into log-2 i+1 every 2 1 days. 

This structure of logs improves upon the daily/ 
weekly /monthly /yearly structure because it avoids the weekly 
and monthly "hiccup" that occurs when the logs are rolled 
over. For example, once a month, the monthly log is rolled 
over into the yearly log and the monthly log is cleared. 
Thus, in the first day of the month, a user who asks "what's 
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changed this month" may see only what has changed in the 
last day. 

With the log-2 1 format, a user can ask what has 
changed in the last 30 days, for example. The system then 
matches the query against log-1, log-2, log-4, log-8, and 
log-16, which will yield pages that have changed in the last 
32 days, which is the lowest power of 2 greater than 30. 

In yet another embodiment, master log server 14 
maintains a single master log of all data received from Web 
servers 12. 

In certain embodiments, the logs are "compressed" by 
omitting detail before they are transmitted between Web 
servers 12 and master log server 14, or between the master 
log server and user computers 16. 

For example, master log server 14 may send out to 
user computers 16 compressed logs that just list which Web 
servers 12 contain pages that have changed, along with the 
time of the most recently modified page on that server, for 
example: 

<http://www.openmarket.com/*, 10/16/95 ll:32a> 
<http://www.netscape.com/*, 10/16/95 12:45p> 
<http://www.src.dec.com/*, 10/16/95 10:43a>. 
Users could use such a compressed log to determine which Web 
servers 12 have some content that has changed recently, even 
though the particular pages that have changed are not 
identified in the entries received by user computers 16. 

The search pattern contained in the query from the user 

. _ — * 

would include a time period specification and perhaps a 
partial URL, but would not include complete URLs, content 
tags, or titles. 

In certain embodiments, Web servers 12 do not 
forward logs to master log server 14. The master log server 
computes log entries for Web servers 12 by directly querying 
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the Web servers and comparing the current contents of the 
Web servers to the master log or logs, which indicate when 
the contents of each Web server was last noticed to change. 

More generally, in certain embodiments Web servers 
12 or master log server 14 compress logs to any level in the 
URL hierarchy, based on each particular Web server's 
content. For example, the daily log for the Open Market Web 
server might be compressed as follows: 

<http : / / www . openmar ket . com/ what ' s -new /*, 10/16/95 11:32 a> 
<http://www.openmarket.com/infor/*, 10/14/95 4:54p> 
<http: //www. openmarket.com/ library/*, 10/18/95 4:31a>. 

With reference to Fig. 2, in another embodiment, 
master server 14 duplicates its master logs onto multiple 
slave servers 30. The slave servers execute user queries or 
redistribute the master logs to user computers 16 in the 
manner described above with respect to master server 14 . 

Once a day, master server 14 sends its day log to 
each of slave servers 30. Each slave server maintains its 
own copy of the day log, week log, month log, and year log, 
and does its own rolling over from day into week, week into 
month, and month into year. Each slave server also 
maintains its own indexes of the entry fields (URL, time, 
content tags, title). Slave servers 30 off-load much of the 
work from master server 14 and allow a greater flow of 
queries from user computers 16 to be executed, while 
reducing communications costs. 

Fig. 3 shows a system for implementing security 
protocols on behalf of a network tool that does not 
implement them. In World-Wide Web network 32, a proxy 
server 34 is inserted between a user's Web browser 36 and 
network servers 38 on the Internet. Each user has a 
personal proxy server 34, which may be located on the same 
computer as the user's Web browser 36. Proxy server 34 

- 12 - 



intercepts all requests for pages (or other items of 
network-based information) made by browser 3 6 and all 
responses coming back from network servers 38. Proxy server 
34 can execute the appropriate security protocols on behalf 

5 of Web browser 36. 

Many Web browsers and tools don't implement the new 
Web security protocols SSL, SHTTP, and PCT (a new standard 
protocol similar to SSL) . These protocols are more 
complicated than the original and very simple Web protocols. 

10 To implement the security protocols SSL, SHTTP, and PCT on 
behalf of a browser 36 that doesn't understand them, proxy 
server 34 examines each incoming page of information 35 
requested by browser 36. Proxy server 34 translates all 
secure URLs on the page to special unsecure URLs and then 

15 forwards the translated page 37 to browser 36. 

An SSL URL has the form: https:"/ /x/y/z. Proxy 
server 34 translates a secure URL of the form https: //x/y/z 
to an unsecure URL of the form http: //PROXY/x/y/z/SSL. 
An SHTTP URL has the form: shttp: //x/y/z. In 

20 addition, a Web page containing SHTTP URLs must include 

additional information telling browsers how to access those 
URLs. That additional information appears in two places: in 
anchors and in tagged fields elsewhere on the page. 

Anchors are special fields on an HTML page that 

25 contain URLs representing links to other pages (HTML is the 
language in which Web pages are written) . An SHTTP anchor 
has the form: 

<A href=shttp: //x/y/z" Sl=sl S2=s2 ... Sn=sn Fl=fl 
F2=f2 ... Fn=fn> Click here to see this page. </A>. 

30 The Si=si fields are name-value pairs describing SHTTP 

parameters to be used for accessing this particular URL, and 
the name-value pairs Fi=fi describe other aspects of the 
anchor unrelated to SHTTP. 



The rest of the SHTTP information appears elsewhere 
on the page, in specially tagged fields of the form: 

<Ti> </Ti> 

where Ti is a tag specific to the SHTTP protocol. 

When presented with a page containing a secure SHTTP 
URL, proxy server 34 rewrites the page, by removing the 
specially tagged SHTTP fields of the form <Ti> ... </Ti> and 
by translating the SHTTP anchors into: 

<A href=http://PROXY/x/y/z/SHTTP#####" Sl=sl S2=s2 

. . . Sn=sn Fl=f 1 F2=f 2 . . . Fn=f n> Click here to see 

this page. </A>. 
The trailing component #####, which represents an encoding 
of the Si=si name- value pairs from the original anchor and 
the tagged fields <Ti> ... </Ti>, is a string of letters and 
digits that encode data needed to reverse the translation 
and execute the security protocol to retrieve the URL. Any 
encoding scheme can be used that obeys the standard URL 
syntax. 

When the user clicks on one of the translated 
unsecure URLs, the request to read its page is intercepted 
by proxy server 34. The prefix "PROXY/" identifies the URL 
to the proxy server as a translation. The proxy server 
back-translates it to the original secure URL and executes 
the SHTTP secure protocol to request the page from network 
server 38. 

In an alternative embodiment, instead of directly 
encoding the SHTTP parameters in the URL, proxy server 34 
maintains a table with entries for each translated URL, each 
entry containing the Si=sn name-value pairs and the <Ti> . • • 
</Ti> fields. The ##### in the translation is replaced by 
the number of the corresponding table entry, rather than the 
contents of the entry. 
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With reference to Fig. 4, proxy server 34 can manage 
a user's authenticating credentials automatically on behalf 
of the user. When a user registers to use a subscription 
service on the Web, the user is assigned a set of 
credentials identifying the user to the service. The 
crec i en tials may be a simple user ID and password or a public 
key and private key pair. 

To manage the user's credentials automatically, the 
proxy server stores a table 40 of pairs <S, C>, where S 
represents the name of a subscription service's server and C 
represents the correspondijig^^ede3\tials for that service. 
The table is stored on the user's computer and is protected 
by a single password op smart card. When the user first 
starts a Web session, proxy server/34 will ask the user to 
supply that secret. — 

When browser 36 requests a page (or other item of 
network-based information) from network server 38, proxy 
server 34 forwards the request to network server 38. 
Network server 38 may respond with a "please authenticate" 
message. At this point, browser 36 would ordinarily display 
a dialog box asking the user to type in a user ID and 
password. But, in the present invention, proxy server 34 
looks in table 40 for credentials corresponding to network 
server 38 and sends them back to the network server. The 
network server replies with the requested page, which proxy 
server 34 forwards to browser 36. 

In this way, proxy server 34 automatically executes 
the authentication on behalf of the user, without any notice 
or typing on the part of the user. This is important 
because a user often can't or doesn't want to use the same 
credentials for each of the service to which the user 
subscribes. As the number of such services grows, it is 
difficult for the users to manage all of their credentials. 
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Fig. 5 is. a diagram of a system 42 for inducing 
advertisers to target their advertisements to consumers for 
whom the advertisements are likely to be of interest. An 
advertising broker server 44 provides each consumer with a 
"personal billboard" 46 , which is a Web page only that 
particular consumer can read. Network advertiser servers 48 
bid for space on each consumer's billboard 46 with offers of 
cash and coupons for discounts on goods and services. 
Network advertiser servers 48 place ads on billboard 46 
customized for the particular consumer, and the 
advertisements are ordered on the billboard by the amount of 
the bid. When a consumer reads the ad, the consumer 
receives the cash or coupon. Advertising broker server 44 
receives a payment for each advertisement place on billboard 
46 and each advertisement read by a consumer. 

The consumer's actual name and mailing address may 
be provided to advertising broker server 44 when the 
consumer registers with the advertising broker server. 
Advertising broker server 44 and network advertising servers 
48 can build profiles of individual consumers using 
traditional mailing lists, a survey filled out by the 
consumer when the consumer registers, or a record of the 
advertisements and Web pages the consumer actually reads. 

In order to record which advertisements and Web 
pages the consumer reads, advertising broker server 44 
provides a program that runs on the consumer's computer. 
The program is either the consumer's Web browser 50 itself, 
or a "proxy server" 52 that sits between Web browser 50 and 
the Internet. The program records all advertisements and 
pages the consumer reads, in a manner that ensures that a 
real person, rather than a computer program, has read each 
advertisement. Otherwise, clever users could write a 
program that reads every advertisement and collects the 
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offered cash. The program may require the user to provide 
user authentication to advertising broker server 44. 

There are a number of techniques for ensuring that a 
real person has read a particular advertisement, associated 
with differing degrees of security. For example, proxy 
server 52 could detect whether there were any mouse clicks 
or key clicks in a windows program immediately preceding , 
within a fraction of a second, a request from browser 50 to 
read a particular page. Alternatively, the pages of 
information might be set up in a manner such that the user 
must read several pages before receiving any money, and 
proxy server 52 could require that a user spend a certain 
amount of time (e.g., 30 seconds) reading each page. 
Alternatively, the pages may include forms and the user must 
fill out the form before receiving any money. 

Many consumers would be concerned that detailed logs 
of what they read would be given to advertisers. There are 
two ways to solve this problem. In one embodiment, 
advertising broker server 44 digests the detailed reading 
logs provided to the advertising broker server by each user 
computer into abstract consumer profiles, which the 
advertising broker server then transmits to network 
advertiser servers 48, perhaps for a fee. In another 
embodiment, advertising broker server 44 assigns a unique 
number to each consumer, and the advertising broker server 
44 gives the reading logs to network advertiser servers 48 
keyed by the number rather than the consumer's name. Only 
advertising broker server 44 knows the correspondence 
between number and name. In either approach, the 
advertising brokerage service contractually promises never 
to disclose the consumer's identity without the consumer's 
permission. 
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Direct advertising on the Web removes the middleman 
of broadcast advertising. Traditionally, advertisers "pay" 
consumers to view their advertisements by subsidizing the 
cost of consumer entertainment such as television, radio, 
newspapers, and magazines. But, direct advertising on the 
Web spends that money directly on the consumer. 

With direct advertising sent via U.S. mail, a 
successful response can cost a substantial amount of money. 
Direct advertising on the Web can be much, much cheaper, and 
so it can be expected that advertisers will be willing to 
spend some of that money in direct payments to consumers who 
read their advertisements. 

The payments encourage the advertisers to closely 
target their advertisements to those consumers most likely 
to read them, and they signal to consumers the worth of the 
information contained in the advertisement. An advertiser 
that carefully targets its audience may be willing to offer 
a large amount of money to a consumer to read its 
advertisement. Such a large amount signals to the consumer 
that this advertisement is special in some way and most 
likely contains valuable information. 

Consumers can be expected to like the personal 
billboard because it is unobtrusive in that consumers can 
read advertisements only when they wish to do so, because 
the consumer is likely to see advertisements that are of 
interest to the consumer, and because the consumer is paid 
for reading the advertisements. 

Advertisers can be expected to like the personal 
billboards because they are relatively inexpensive, because 
they can efficiently target those consumers most likely to 
want their products, and because the advertisers can induce 
consumers to read the advertisements with cash and coupons. 
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One implementation of the system of Fig. 5 is 
exemplified as follows. Using customer profiles supplied by 
advertising broker server 44, a network advertiser server 48 
submits to advertising broker server 44 an advertisement 

5 specifically targeted for a particular customer 

identification number. The advertisement is accompanied by 
an offer of a certain amount of money to be paid to the 
broker for placing the advertisement on billboard 46, a 
certain amount of money to be paid to the broker if the 

10 consumer reads the advertisement, and a certain amount of 
money to be paid to the consumer if the consumer reads the 
advertisement . 

Advertising broker server 44 maps the consumer 
identification number to a particular consumer and places 

15 the advertisement on the consumer's personal billboard. The 
billboard is a Web page that is readable only by the 
consumer (standard Web security enforces this) . The 
advertisements on the page are ordered according to the 
value of their bids. 

20 Proxy server 52, which sits between the user's 

browser 50 and the network, filters all network traffic to 
and from the browser. 

When the user reads an advertisement by clicking on 
its URL in browser 50, proxy server 52 verifies that a real 

25 user, rather than a computer program, is reading the 

advertisement, and, using encryption technology, sends proof 

to advertising broker server 44 that the user read the 

— «» 

advertisement . 

Advertising broker server 44 transmits a request to 
30 payment computer or switch 54 to pay the user the 

appropriate amount of money and to pay the broker the 
appropriate amount of money. The payment computer 
authenticates the payment request, and causes payment to be 
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executed upon authentication of the payment request. This 
can be accomplished in the manner set forth in U.S. Patent 
Application Serial No. 08/168,519, filed December 16 , 1993, 
and U.S. Patent Application Serial No. 08/328,133, filed 
5 October 24, 1994, the entire disclosures of which are hereby 
incorporated herein by reference. 

Proxy server 52 records all advertisements and pages 
read by the user and periodically sends a log of these 
advertisements and pages to advertising broker server 44. 
10 The advertising broker server 44 digests all of the usage 
logs of the users and sends consumer profiles, tagged by 
anonymous consumer identifiers, to network advertiser 
servers 48. 

Fig. 6 is a diagram of a system for extracting 

15 information from pages of information (or other items of 

network-based information) on a communications network. The 
system provides an OLE object 56 for extracting data from a 
page 58 or any other source of network-based information and 
embedding it in a document 60. OLE is Microsoft's standard 

20 method of building compound documents. OLE object 56 

contains the URL of page 58 containing the desired data. 
OLE object 56 also contains a link from which the OLE object 
can locate a script program 62, written in a scripting 
language such as TCL that, when evaluated, extracts the 

25 desired data from data page 58. 

OLE object 56 can be embedded within any compound 
document 60 such as a word-processor document or a 
spreadsheet. The result of applying script program 62 to 
data page 58 is inserted into compound document 60. Script 

30 program 62 may strip away useless content, or it may 

transform the content from one representation into another 
more suitable for the application. For example, the script 
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program may convert an HTML table into a Microsoft Word 
table. 

In general, each different kind of data page 58 will 
have a different script program 62. For example, there can 
5 be one script for PAWWS stock quotes, another for National 
Weather Service weather reports, another for mortgage rates 
published in the Mercury News, etc. Script programs can be 
associated with data pages 58 in a number of different ways. 

For example, a user or vender can write a particular 
10 script program 62 for a particular page 58 or class of pages 
and bind that script program 62 into OLE object 56. 

Alternatively, the URL of a page containing script 
program 62 can be encoded in data page 58 in special HTML 
(Hypertext Markup Language) comments, which a browser 
15 normally doesn't show to the user. OLE object 56 looks for 
the special comments, retrieves the contents of the page 
referenced by the URL in the comments, and uses the contents 
as a script. This approach is appropriate when the provider 
of data page 58 also supplies script program 62. 
20 Alternatively, data page 58 is tagged with a content 

tag describing the type of the page, for example, PAWWS/ 
Stock/Quote. Using a table 64 on the side, OLE object 56 
maps the content tag to a script program 62. This is 
appropriate when the script program is supplied by a third 
25 party that doesn't have access to the contents of data page 
58. 

Script program 62 is digitally signed by a trusted 
third party, certifying that the script is safe to execute 
and is not a virus or malicious program. Such certification 
3 0 is a known technique. 

The invention is also applicable to other compound 
document architectures other than OLE, such as, for example, 
OpenDoc. 



It can be seen that the extracted information can 
exclude the extraneous content of most information on the 
Web that makes pages of information pleasing to read within 
Web browsers. In other words, these pages of information 
5 are not in a "raw" form suitable for use with other 
applications such as spreadsheets. 

As an example of a situation in which the object 
embedding is useful, the PAWWS Financial Network provides 
up-to-date stock quotes over the Web. A financial analyst 
10 can include some quotes in a spreadsheet that gets updated 
every day, without having to manually cut and paste quotes 
from the Web page into the spreadsheet. The analyst can 
automatically extract the closing price for a given company 
from a page of information corresponding to that company, 
15 and can insert the closing price into the spreadsheet in 
such a way that when the contents of the page are changed, 
the corresponding contents of the spreadsheet are changed. 

Script program 62 can be configured to automatically 
notice when page 58 changes, by, for example, polling the 
20 page on a regular basis. When page 58 changes, script 
program 62 recomputes the result it provided as part of 
compound document 60, and calls the compound document 
manager to have the compound document updated and optionally 
displayed. 

25 As another example, a real-estate agency can give 

its customers a printed flyer listing current mortgage rates 
for several of the local banks, extracted from a larger 
listing published on the Web by the city newspaper. The 
real-estate agency can update the flyer every week without 

30 cutting and pasting from the newspaper Web page. 

There have been described systems and methods for 
managing transfers of information in communications 
networks. It will be apparent to those skilled in the art 



that numerous modifications of and departures from the 
specific embodiments described herein are possible without 
departing from the inventive concepts set forth in the 
claims. 

5 What is claimed is: 
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1 1. A system for identifying updated items of 

2 network-based information to users in a public packet 

3 switched communications network comprising a plurality of 

4 network servers: 

5 a master log server; and 

6 a plurality of user computers; 

7 said master log server being programmed to 



8 periodically receive data from at least some of said 

9 plurality of network servers, said master log server further 

10 being programmed to cause said data to be assembled into one 

11 or more master logs having a plurality of entries, each 

12 entry pertaining to creation of or changing of an item of 

13 network-based information that has occurred within a 

14 predetermined time span, and to cause at least some of said 

15 entries in said one or more master logs to be transmitted to 

16 one of said plurality of user computers; 

17 said plurality of user computers being programmed to 

18 receive a user query comprising a request to provide to a 

19 user at least a subset of said entries in said one or more 

20 master logs wherein each of said entries in said subset 

21 matches a search pattern contained in said user query, said 

22 search pattern comprising an identification of a time 

23 period, and to cause said user query to be executed by 

24 providing to said user, from each of said one or more master 

25 logs into which data has been assembled within said time 

26 period, said subset of said entries. 

1 2. A system in accordance with claim 1, wherein 

2 said data received by said master log server from said 

3 network servers comprises logs having entries pertaining to 

4 creation of or changing of items of network-based 

5 information. 
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1 3. A system in accordance with claim 1, wherein 

2 said master log server is programmed to cause a first one of 

3 said master logs to be merged into a second one of said 

4 master logs on a periodic basis, and to cause said first one 

5 of said master logs to be cleared on said periodic basis. 

1 4. A system in accordance with claim 3, wherein 

2 said master log server is programmed to cause said second 

3 one of said master logs to be merged into a third one of 

4 said master logs on a periodic basis and to cause said 

5 second one of said master logs to be cleared on said 

6 periodic basis. 



1 5. A system in accordance with claim 1, wherein 

2 said items of network-based information comprise pages of 

3 information. 

1 6. A system in accordance with claim 1, wherein: 

2 each of said user computers is programmed to 

3 transmit said user query to said master log server; and 

4 said master log server is programmed to receive said 

5 user query from one of said user computers and to execute 

6 said user query by transmitting said subset of said entries 

7 to said one of said user computers. 

1 7. A system in accordance with claim 1, wherein: 

2 said master log server is programmed to transmit 

3 entries in said master logs that occurred during said time 

4 period to said one of said user computers; and 

5 each of said user computers is programmed to execute 

6 said user query internally. 
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1 8. A system in accordance with claim 1, wherein 

2 entries pertaining to creation of or changing of items of 

3 network-based information comprise identifications of said 

4 items of network-based information, 

1 9. A system in accordance with claim 1, wherein 

2 said entries pertaining to creation of or changing of items 

3 of network-based information comprise identifications of 

4 servers that maintain said items of network-based 

5 information. 

1 10. A system in accordance with claim 1, wherein 

2 said master log server is programmed to cause said entries 

3 that said master log server causes to be transmitted to said 

4 one of said plurality of user computers to be compressed 

5 prior to transmission to said one of said plurality of user 

6 computers by causing information to be deleted from said 

7 entries. 

1 11. A system in accordance with claim 1, wherein 

2 said user query is a standing query that is executed on a 

3 periodic basis by providing to said user, from one of said 

4 master logs that said master log server causes to be cleared 

5 on said periodic basis, all entries that match said search 

6 pattern contained in said standing query, immediately before 

7 said master log server causes said one of said master logs 

8 to be cleared. 

12. A system in accordance with claim 1, wherein: 
each of said entries comprises at least one field; 



1 
2 

3 and 
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5 
6 



said master log server is programmed to cause at 
least one of said master logs to be indexed by said field, 
so as to enable fast searches. 



1 13. A system in accordance with claim 12, wherein: 

2 each of said entries comprises a plurality of 

3 fields; and 

4 said master log server is programmed to cause at 

5 least one of said master logs to be indexed by each of said 

6 fields. 

1 14. A system in accordance with claim 1, wherein: 

2 said system further comprises a plurality of slave 

3 servers; 

4 said master log server is programmed to periodically 

5 transmit at least one of said master logs to each of said 

6 slave servers; and 

7 each of said slave servers is programmed to transmit 

8 at least some of said entries in said master log to one of 

9 said plurality of user computers. 

1 15 . A system in accordance with claim 14 , wherein: 

2 each of said user computers is programmed to 

3 transmit said user query to one of said slave servers; and 

4 each of said slave servers is programmed to receive 

5 said user query from one of said user computers and to 

6 execute said user query by transmitting said subset of said 

7 entries to said one of said user computers. 

1 16. A system in accordance with claim 14, wherein 

2 said master log server is programmed to cause a first one o 

3 said master logs to be merged into a second one of said 

4 master logs on a periodic basis and to cause said first 
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5 master log to be- cleared on said periodic basis by 

6 periodically transmitting said first master log to each of 

7 said slave servers, each of said slave servers being 

8 programmed to merge said first master log into said second 

9 master log on said periodic basis, and to clear said first 
10 of said master logs on said periodic basis. 

1 17, A system in accordance with claim 14, wherein: 

2 each of said entries comprises at least one field; 

3 and 

4 each of said slave servers is programmed to cause 

5 said one or more master logs to be indexed by said field, so 

6 as to enable fast searches. 

1 18. A method for identifying updated items of 

2 network-based information to users in a public packet 

3 switched communications network comprising a plurality of 

4 network servers, a master log server, and a plurality of 

5 user computers, comprising the steps of: 

6 periodically receiving, at said master log server, 

7 data from at least some of said plurality of network 

8 servers ; 

9 assembling said data into one or more master logs 

10 having a plurality of entries, each of said master logs 

11 comprising at least one entry, each entry pertaining to 

12 creation of or changing of an item of network-based 

13 information that has occurred within a predetermined time 

14 span; 

!5 causing at least some of said entries in said one or 

16 more master logs to be transmitted to one of said plurality 

17 of user computers; 

18 receiving user queries at each of said user 

19 computers, each of said user queries comprising a request tc 
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20 provide to a user at least a subset of said entries in said 

21 one or more master logs wherein each of said entries in said 

22 subset matches a search pattern contained in said user 

23 query, said search pattern comprising an identification of a 

24 time period; and 

25 causing said user queries to be executed by 

26 providing to said user, from each of said one or more master 

27 logs into which data has been assembled within said time 

28 period, said subset of said entries. 

1 19. A system for implementing security protocols in 

2 a public packet switched communications network comprising a 

3 plurality of network servers programmed to receive requests 

4 from users for items of network-based information and to 

5 transmit said items of network-based information to said 

6 users in response to said requests, comprising: 

7 a network tool, implemented on a computer, 

8 programmed to receive a first item of network-based 

9 information comprising a link in a protocol compatible with 

10 said network tool, and, in response to user input selecting 

11 said link, to create a request for said second item of 

12 network-based information, said request comprising said 

13 link; and 

14 a proxy server, implemented on a computer, 

15 programmed to receive said first item of network-based 

16 information from one of said network servers, wherein said 

17 link is in a protocol incompatible with said network tool, 

18 to translate said link into said protocol compatible with 

19 said network tool, to transmit to said network tool said 

20 first item of network-based information, with said link 

21 being translated into said protocol compatible with said 

22 network tool, to receive said request for said second item 

23 of network-based information from said network tool, to 
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24 retrieve said link from said request, to back-translate said 

25 link into said protocol incompatible with said network tool, 

26 and to request said second item of network-based information 

27 from one of said network servers. 



1 20. A system in accordance with claim 19, wherein 

2 said proxy server is programmed to execute said protocol 

3 incompatible with said network tool in a manner that 

4 authenticates an identity of said user. 

1 21. A system in accordance with claim 19 r wherein: 

2 said proxy server is programmed to encode within 

3 said link data identifying said protocol incompatible with 

4 said network tool, prior to transmitting to said network 

5 tool said first item of network-based information comprising 

6 said link; and 

7 said proxy server is programmed to decode said data 

8 to determine how to back-translate said link. 

1 22. A system in accordance with claim 19, wherein 

2 said proxy server is programmed to incorporate into said 

3 link a flag identifying said link as a translated link, 

4 prior to transmitting to said network tool said first item 

5 of network-based information comprising said link. 

1 23. A system in accordance with claim 19, wherein 

2 said computer on which said proxy server is implemented is 

3 said computer on* which said network tool is implemented. 

1 24. A system in accordance with claim 19, wherein 

2 said link comprises a universal resource locator. 
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1 25. A system in accordance with claim 19, wherein 

2 said network tool comprises a browser programmed to cause 

3 items of network-based information to be displayed to a 

4 user . 

1 26. A system in accordance with claim 19 , wherein 

2 said protocol compatible with said network tool is HTTP. 

1 27. A system in accordance with claim 19, wherein 

2 said protocol incompatible with said network tool is SSL. 

1 28. A system in accordance with claim 19, wherein 

2 said protocol incompatible with said network tool is SHTTP. 

1 29. A system in accordance with claim 19, wherein 

2 said items of network-based information comprise pages of 

3 information. 

1 30. A method of implementing security protocols in 



2 a public packet switched communications network comprising a 

3 plurality of network servers programmed to receive requests 

4 from users for items of network-based information and to 

5 transmit said items of network-based information to said 

6 users in response to said requests, a network tool 

7 implemented on a computer, and a proxy server implemented on 

8 a computer, comprising the steps of: 

9 at said proxy server, receiving a first item of 

10 network-based information from one of said network servers 

11 comprising a link in a protocol incompatible with said 

12 network tool, translating said link into a protocol 

13 compatible with said network tool, and transmitting to said 

14 network tool said first item of network-based information, 
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15 with said link being translated into said protocol 

16 compatible with said network tool; 

17 at said network tool, receiving said first item of 

18 network-based information, and, in response to user input 

19 selecting said link, creating a request for said second item 

20 of network-based information, said request comprising said 

21 link; 

22 at said proxy server, receiving said request for 

23 said second item of network-based information from said 

24 network tool, retrieving said link from said request, back- 

25 translating said link into said protocol incompatible with 

26 said network tool, and requesting said second item of 

27 network-based information from said one of said network 

28 servers. 



1 31. A system for managing authenticating 

2 credentials of a user of a public packet switched 

3 communications network comprising a plurality of network 

4 servers programmed to receive requests from users for items 

5 of network-based information and to transmit said items of 

6 network-based information to said users in response to said 

7 requests, comprising: 

8 a network tool, implemented on a computer, 

9 programmed to create a request for an item of network-based 

10 information from one of said network servers in response to 

11 input from a user, and to receive said item of network-based 

12 information in response to said request; 

13 a proxy server, implemented on a computer, 



14 programmed to maintain a table of authenticating credentials 

15 for each of said plurality of network servers, to receive 

16 said request from said network tool, to forward said request 

17 to said one of said network servers, to receive a request 

18 for authentication from said one of said network servers, to 
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19 retrieve from said table authenticating credentials for said 

20 one of said network servers, to transmit said authenticating 

21 credentials to said network server, to receive said item of 

22 network-based information from said network server, and to 

23 forward said item of network-based information to said 

24 network tool. 

1 32. A system in accordance with claim 31, wherein 

2 said proxy server is further programmed to request a 

3 security message from said user in order to protect said 

4 table of authenticating credentials. 

1 33. A system in accordance with claim 31, wherein 

2 said computer on which said proxy server is implemented is 

3 said computer on which said network tool is implemented. 

1 34. A system in accordance with claim 31, wherein 

2 said network tool comprises a browser programmed to cause 

3 items of network-based information to be displayed to a 

4 user . 

1 35. A system in accordance with claim 31, wherein 

2 said items of network-based information comprise pages of 

3 information. 

1 36. A method of managing authenticating credentials 

2 of a user of a public packet switched communications network 

3 comprising a plurality of network servers programmed to 

4 receive requests from users for items of network-based 

5 information and to transmit said items of network-based 

6 information to said users in response to said requests, a 

7 network tool implemented on a computer, and a proxy server 

8 implemented on a computer, comprising the steps of: 
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9 at said network tool, creating a request for an item 

10 of network-based information from one of said network 

11 servers in response to input from a user, and receiving said 

12 item of network-based information in response to said 

13 request; and 

14 at said proxy server, maintaining a table of 

15 authenticating credentials for each of said plurality of 

16 network servers, receiving said request from said network 

17 tool, forwarding said request to said one of said network 

18 servers, receiving a request for authentication from said 

19 one of said network servers, retrieving from said table 

20 authenticating credentials for said one of said network 

21 servers, transmitting said authenticating credentials to 

22 said network server, receiving said item of network-based 

23 information from said network server, and forwarding said 

24 item of network-based information to said network tool. 

1 37. A system for inducing advertisers to target 

2 advertisements to consumers in a public packet switched 

3 communications network comprising a plurality of network 

4 advertiser servers programmed to transmit advertisements, 

5 said system comprising: 

6 an advertising broker server; and 

7 a plurality of user computers; 

8 said advertising broker server being programmed to 

9 receive advertisements from each of said network advertiser 

10 servers, each of said advertisements being targeted toward 

11 at least one of~ a plurality of users served by said 

12 advertising broker server and being accompanied by an offer 

13 having monetary value for acceptance of said advertisement, 

14 and to transmit at least one of said advertisements to one 

15 of said user computers operated by a user targeted by said 

1 6 advert i s ement ; 
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17 each one .of said plurality of user computers being 

18 programmed to receive advertisements from said advertising 

19 broker server and, whenever a user of said one of said user 

20 computers has read an advertisement, to send a message to 

21 said advertising broker server indicating that said user has 

22 read said advertisement; 

23 said advertising broker server being programmed to 

24 receive said message indicating that said user has read said 

25 advertisement, and, in response thereto, to cause said offer 

26 having monetary value to be executed. 

1 38. A system in accordance with claim 37, wherein 

2 said advertising broker server is programmed to create a 

3 personal billboard page of information for each one of said 

4 plurality of users served by said advertising broker server, 

5 said billboard page of information comprising advertisements 

6 transmitted by said advertising broker server to a user 

7 computer operated by said one of said plurality of users. 

1 39. A system in accordance with claim 37, wherein: 

2 said offer having monetary value comprises a bid for 

3 transmission of an advertisement to a user computer operated 

4 by a user targeted by said advertisement; and 

5 said advertising broker server is programmed to 

6 transmit said advertisement to said user computer operated 

7 by said user targeted by said advertisement only if said bid 

8 is acceptable to said advertising broker server. 

1 40. A system in accordance with claim 37, wherein 

2 said offer comprising monetary value comprises an offer to 

3 transfer monetary value to said advertising broker server. 
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1 41. A system in accordance with claim 37 , wherein 

2 said offer comprising monetary value comprises an offer to 

3 transfer monetary value to said user targeted by said 

4 advertisement . 

1 42. A system in accordance with claim 37, wherein: 

2 each one of said user computers is programmed to 

3 create a record of advertisements read by a user of said one 

4 of said user computers and to transmit said record to said 

5 advertising broker server; and 

6 said advertising broker server is programmed to 

7 transmit to said network servers information pertaining to 

8 said record of advertisements read by said user. 

1 43. A system in accordance with claim 42, wherein 

2 said advertising broker server is programmed to transmit to 

3 said network advertiser servers said information pertaining 

4 to said record of advertisements read by said user in a 

5 manner that preserves anonymity of said user. 



1 44. A system in accordance with claim 37, wherein 

2 at least one of said user computers comprises a proxy server 

3 programmed to receive advertisements from said advertising 

4 broker server and, whenever a user of said one of said user 

5 computers has read an advertisement, to send a message to 

6 said advertising broker server indicating that said user has 

7 read said advertisement. 

1 45. A system in accordance with claim 37, wherein 

2 each one of said plurality of user computers is programmed 

3 to send said message to said advertising broker server 

4 indicating that a user has read an advertisement only if 
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5 said user computer verifies against computer-simulated 

6 reading of said advertisement* 



1 46. A system in accordance with claim 37, wherein: 

2 said system further comprises a payment computer 

3 programmed to receive payment requests, to authenticate said 

4 payment requests, and to cause payment to be executed upon 

5 authentication of each of said payment requests; and 

6 said advertising broker server is programmed to 

7 cause said offer having monetary value to be executed by 

8 transmitting a payment request to said payment computer . 

1 47. A system in accordance with claim 37, wherein 

2 said advertising broker server is programmed to provide to 

3 said network advertiser servers information with respect to 

4 each of said users from which said network advertiser 

5 servers can deduce which advertisements are likely to be of 

6 interest to each of said users. 

1 48. A system in accordance with claim 47, wherein: 

2 said advertising broker is programmed to provide 

3 said information to said network advertiser servers 

4 accompanied by customer profile numbers corresponding to 

5 actual users whose identities are not revealed by said 

6 advertising broker server; and 

7 at least some of said advertisements received by 

8 said advertising broker server from said network advertiser 

9 servers are targeted toward one of said plurality of 
10 customer profile numbers. 

1 49. A system in accordance with claim 37, wherein 

2 said offer having monetary value comprises an offer of 

3 money. 
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50. A system in accordance with claim 37, wherein 
said offer having monetary value comprises an offer of a 
coupon for a discount on a purchase. 



1 51. A method of inducing advertisers to target 

2 advertisements to consumers in a public packet switched 

3 communications network comprising a plurality of network 

4 advertiser servers programmed to transmit advertisements, an 

5 advertising broker server, and a plurality of user 

6 computers, comprising the steps of: 

7 at said advertising broker server, receiving 

8 advertisements from each of said network advertiser servers, 

9 each of said advertisements being targeted toward at least 

10 one of a plurality of users served by said advertising 

11 broker server and being accompanied by an offer having 

12 monetary value for acceptance of said advertisement, and 

13 transmitting at least one of said advertisements to one of 

14 said user computers operated by a user targeted by said 

15 advertisement ; 

16 at each one of said plurality of user computers, 

17 receiving advertisements from said advertising broker server 

18 and, whenever a user of said one of said user computers has 

19 read an advertisement, sending a message to said advertising 

20 broker server indicating that said user has read said 

2 1 advertisement ; and 

22 at said advertising broker server, receiving said 

23 message indicating that said user has read said 

24 advertisement, "and, in response thereto, causing said offer 

25 having monetary value to be executed. 

1 52. A system for extracting data from sources of 

2 network-based information in a communications network 

3 comprising a plurality of network servers programmed to 
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4 transmit networkrbased information over said network, 

5 comprising: 

6 a script program, implemented on a computer in said 

7 communications network, structured to extract data from 

8 network-based information provided by one of said network 

9 servers ; and 

10 an object embedding program, implemented on a 

11 computer in said communications network, comprising a link 

12 to said network-based information provided by said one of 

13 said network servers and a link from which said object 

14 embedding program can locate said script program, said 

15 object embedding program being structured to apply said 

16 script program to said network-based information so as to 

17 cause said data to be extracted from said network-based 

18 information, and to embed said data within a compound 

19 document implemented on a computer in said communications 

20 network. 

1 53. A system in accordance with claim 52, wherein 

2 said link from which said object embedding program can 

3 locate said script program comprises a direct link to said 

4 script program. 

1 54. A system in accordance with claim 52, wherein 

2 said link from which said object embedding program can 

3 locate said script program is said link to said network- 

4 based information, and wherein said network-based 

5 information in "turn comprises a link to said script program. 

1 55. A system in accordance with claim 52, wherein 

2 said link from which said object embedding program can 

3 locate said script program comprises said link to said 

4 network-based information, and wherein said network-based 
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5 information comprises an identification of a table 

6 comprising a link to said script program. 



1 56. A system in accordance with claim 52, wherein 

2 said link comprises a universal resource locator. 

1 57. A system in accordance with claim 52, wherein 

2 said computer on which said object embedding program is 

3 implemented comprises said computer on which said compound 

4 document is implemented. 

1 58. A system in accordance with claim 52, wherein 

2 said network-based information is a page of information. 

1 59. A method of extracting data from network-based 

2 information in a communications network comprising a 

3 plurality of network servers programmed to transmit network- 

4 based information over said network, comprising the steps 

5 of: 

6 executing an object embedding program implemented on 



7 a computer in said communications network to locate a script 

8 program from a link in said object embedding program, to 

9 apply said script program to network-based information, 

10 provided by said one of said network servers, to which said 

11 object embedding program is linked by a link in said object 

12 embedding program, and to apply said script program to said 

13 network-based information; 

14 executing said script program, implemented on a 

15 computer in said communications network, to extract data 

16 from said network-based information provided by said one of 

17 said network servers; and 
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18 continuing to execute said object embedding program 

19 to embed said data within a compound document implemented on 

20 a computer in said communications network. 
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MANAGING TRANSFERS OF INFORMATION 
"IN A COMMUNICATIONS NETWORK 

Abstract of the Disclosure 
The invention features various techniques for 
managing transfers of information in public packet switched 
communications networks. In one aspect, the invention 
provides a system for identifying updated items of network- 
based information, such as pages, to users in a network, A 
master server receives the data from each of a plurality of 
network servers and merges them into one or more master 
logs. The logs have entries that pertaining to creation of 
or changing of pages of information. Another aspect of the 
invention features a system for implementing security 
protocols. A proxy server translates links from a protocol 
incompatible with the network tool to a protocol compatible 
with the network tool and back- translates the link. Another 
aspect of the invention features a system for managing 
authenticating credentials of a user. A proxy server 
manages a user's authenticating credentials automatically on 
behalf of the user. Another aspect of the invention 
features a system for inducing advertisers to target 
advertisements to consumers. An advertising broker receives 
advertisements and messages indicating that users" have read 
the advertisements, and causes an offer having monetary 
value to be executed. Another aspect of the invention 
features a system for extracting data from sources of 
network-based information in a communications network. An 
object embedding^program locates a script program and causes 
the script program to extract data from a page of 
information. 
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